Sorting out security problems with Ajax requests